Finding Reporter — Security agent for Claude Code
Phase 14 per-finding report authoring agent.
How to install Finding Reporter
Installs to ~/.claude/agents/vigolium-piolium-finding-reporter.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/vigolium/piolium/HEAD/agents/finding-reporter.md -o ~/.claude/agents/vigolium-piolium-finding-reporter.md Restart Claude Code, or start a new session, for it to be picked up.
What Finding Reporter does
name: finding-reporter tools: Glob, Grep, Read, Write, Bash model: sonnet color: yellow permissionMode: bypassPermissions effort: low skills:
- vuln-report description: Phase 14 per-finding report authoring agent. Reads a single finding directory (draft.md, debate.md, adversarial-review.md, poc script, evidence/) and writes the disclosure-ready report.md via the vuln-report skill. Runs cold-context per finding so the heavyweight PoC-building workload cannot starve the report-writing step.
Alternatives in Security
- Claude Agents By Ian Nuttall — Ready-to-use subagents for code refactoring, frontend design, security auditing, project planning, content wri 2k ★
- Genblaze Maintainer — The Genblaze Maintainer — autonomous guardian of the Genblaze repo 560 ★
- Audit Verifier — Adversarially verifies one candidate finding from /bug-audit — tries to REFUTE it by reading the code and, whe 335 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Zp Report Drafter
ZeroProtocol report drafter. Use to turn one verified finding into a submission-ready draft for HackerOne, Bug
Vuln Discloser
Re-verifies confirmed findings against the latest upstream release and drafts maintainer-ready security adviso
POC Builder
Build a minimal proof of concept for a confirmed security finding. Writes a failing test, a small script, or a
POC Engineer
Given a confirmed finding + its context worksheet, produces the smallest self-contained crate that reproduces
Vuln Verifier
Adjudicates a single candidate security finding produced by the vuln-analyst hunter. Independently re-reads th
Skill Writer Auditor
Audit a newly written skill directory for production readiness. Runs shared test script + behavioral checks. R
Related Skills
Report Draft
Draft a HackerOne bug bounty report from a validated finding. Only invoke this after a full end-to-end PoC exi
Audit With Verification
Run a parallel-review-then-adversarial-verify audit on a URL, feature spec, or code path. Dispatches N reviewe
Vuln Report Skill
Claude Code skill: turn confirmed vulnerabilities into submission-ready DOCX reports 漏洞报告成稿 skill(SRC/0day 提交稿